# Network Topology

## Internet Connections
### Primary WAN
- ISP: (not documented in config)
- Interface: igc0
- IP Address: 184.191.143.62/30
- Gateway: 184.191.143.61
- Type: Static

### Secondary WAN (WANCOAX)
- Interface: igc3
- IP Address: DHCP
- Type: Coax backup
- Monitor: 8.8.8.8
- Failover: Part of WAN_Group (Tier 1 with primary)

## Switches

### 1st Floor USW (Core)
- Model: UniFi USW (48-port PoE)
- MAC: 28:70:4e:dc:59:8d
- IP Address: 192.168.3.155
- Uplink: GbE
- Location: 1st Floor
- Clients: 10
- SFP+ 1: -> Switch 2nd Floor (192.168.2.193)
- SFP+ 4: -> Switch MemCare (192.168.2.215)
- Notable ports:
  - Port 8: Epson printer (192.168.2.207)
  - Port 36: USW-16-PoE VoIP switch
  - Port 40: Synology NAS (192.168.0.120)
  - Port 41: AP 103
  - Port 45: Canon printer (192.168.2.230)
  - Port 48: CS-QB (192.168.2.228)

### Switch 2nd Floor
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a5:88)
- IP Address: 192.168.2.193
- Uplink: SFP+ (GbE) to 1st Floor USW
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
- SFP 1: -> 3rd Floor switch
- SFP 2: -> 1st Floor USW (192.168.3.155)

### Switch 3rd Floor
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
- Previous: UniFi 24-port PoE (same model as floors 2/4/old MemCare)
- Test unit: USW Pro Max 16 PoE (MAC: 28:70:4e:32:59:24, IP: 192.168.3.134) — to be removed
- IP Address: 192.168.3.134
- Uplink: SFP (GbE)
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
- SFP+ 1: -> Switch 4th Floor
- SFP+ 2: -> Switch 2nd Floor

### Switch 4th Floor
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **PENDING REPLACEMENT**
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:a9:a2)
- IP Address: 192.168.3.65
- Uplink: SFP+ (GbE) to 3rd Floor switch
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
- SFP 2: -> 3rd Floor switch

### Spare Switches (powered off)
- 3x UniFi 24-port PoE (original floor 2, 3, 4 switches)
- 1x USW Pro Max 16 PoE (3rd floor test unit, MAC: 28:70:4e:32:59:24)
- Status: Powered off, available as spares if needed

### Switch MemCare
- Model: USW-Pro-24-PoE (UniFi Gen 2, 10G, 400W) — **REPLACED 2026-04-07**
- Previous: UniFi 24-port PoE (MAC: 0c:ea:14:3b:b2:08)
- IP Address: 192.168.2.215
- Uplink: SFP+ (GbE) to 1st Floor USW
- Clients: 9
- UPS: CyberPower CP500PFCRM1U (500VA/300W, 1U rackmount)
- Notable: Serves memory care wing (5th/6th floor APs, dining, nurse station)
- Installed via UniFi Device Replacement — settings imported from old switch

### USW Lite 8 PoE
- Model: UniFi USW Lite 8 PoE
- MAC: f4:e2:c6:57:27:87
- IP Address: 192.168.3.214
- Location: MemCare/Kitchen area
- Port 1: Dining Room AP
- Port 2: Printer (192.168.2.202)
- Port 3: Kitchen AP
- Port 7: CHEF-PC (INTERNAL VLAN, 10.0.20.232)
- Port 8: Uplink to Switch MemCare

### USW-16-PoE (VoIP Switch)
- Model: UniFi USW-16-PoE
- MAC: d8:b3:70:21:94:5f
- IP Address: 192.168.3.223
- Location: 1st Floor (connected to Port 36 of 1st Floor USW)
- Clients: 9
- Ports 1-8: AudioCodes VoIP phones (ACL_xxxxx)
- Port 15: Uplink to 1st Floor USW
- Port 16: Vertical-Remote (192.168.2.180)

## Switch Interconnect Topology
```
1st Floor USW (Core - 48 port)
├── SFP+ 1 ──> Switch 2nd Floor (24 port)
│                ├── SFP 1 ──> 3rd Floor USW Pro Max 16 PoE
│                │               └── SFP+ 1 ──> Switch 4th Floor (24 port)
│                └── SFP 2 ──> 1st Floor USW (loop/redundancy)
├── SFP+ 4 ──> Switch MemCare (24 port)
│                └── Port 15 ──> USW Lite 8 PoE
└── Port 36 ──> USW-16-PoE (VoIP, 16 port)
```

## Wireless Access Points (82 total)

### AP Summary by Floor
| Floor | APs | Offline | Models | Notes |
|-------|-----|---------|--------|-------|
| 1     | 16  | 3 (108, 121, 128) | U6-Lite, U7 Pro | Includes Rec Room, Kitchen, Dining |
| 2     | 13  | 1 (204) | U6-Lite, U7 Pro | Includes 2nd Floor Atrium |
| 3     | 13  | 1 (335) | U6-Lite, U7 Pro, U6 Pro | Includes 3rd Floor Atrium |
| 4     | 10  | 3 (406, 441, 450, 4th Fl Atrium) | Various | |
| 5     | 2   | 0 | U6-Lite | 505, 517 |
| 6     | 3   | 0 | U6-Lite, U7 Pro | 608, 615, 622 |
| Common | 6  | 0 | Various | Dining, Kitchen, MemCare areas |
| Special | 1 | 0 | - | CC Bridge (mesh) |

### Offline APs (Needs Attention)
| AP Name | MAC | Last IP | Uplink | Notes |
|---------|-----|---------|--------|-------|
| 108 | 0c:ea:14:3e:55:c6 | 192.168.6.127 | Mesh | Wrong IP range (192.168.6.x) |
| 121 | 0c:ea:14:3e:5e:ae | 192.168.2.184 | Mesh | |
| 128 | 0c:ea:14:1b:2e:d1 | 192.168.2.95 | - | No uplink |
| 204 | 0c:ea:14:3e:5d:42 | 192.168.7.243 | - | Wrong IP range (192.168.7.x) |
| 335 | 0c:ea:14:3e:54:5a | 192.168.2.206 | - | |
| 406 | 0c:ea:14:36:aa:01 | 192.168.2.4 | - | |
| 441 | 0c:ea:14:3e:5e:32 | 192.168.2.200 | - | |
| 450 | 0c:ea:14:36:72:ad | 192.168.6.207 | - | Wrong IP range (192.168.6.x) |
| 4th Floor Atrium | 0c:ea:14:36:b3:61 | 192.168.3.28 | - | |

### Common Area APs
| AP Name | MAC | IP Address | Uplink | Clients | Location |
|---------|-----|-----------|--------|---------|----------|
| Dining Room | 0c:ea:14:36:85:89 | 192.168.2.177 | GbE | 26 | Main dining |
| Kitchen | 0c:ea:14:36:af:91 | 192.168.3.73 | GbE | 9 | Kitchen |
| Memcare Nurse Station | 0c:ea:14:3e:62:3a | 192.168.3.129 | GbE | 8 | MemCare wing |
| Memcare TV Room | 0c:ea:14:3e:56:16 | 192.168.2.14 | GbE | 7 | MemCare TV room |
| Memcare Piano | 0c:ea:14:3e:57:fe | 192.168.2.188 | GbE | 1 | MemCare piano area |
| CC Bridge | 0c:ea:14:36:13:45 | 192.168.2.237 | Mesh | 7 | Bridge/connector |
| 2nd Floor Atrium | 0c:ea:14:3e:58:5e | 192.168.3.215 | GbE | 18 | 2nd floor common |
| 3rd Floor Atrium | 0c:ea:14:3e:63:be | 192.168.3.138 | GbE | 8 | 3rd floor common |

## Key Infrastructure Devices
| Device | IP Address | MAC | Location | Notes |
|--------|-----------|-----|----------|-------|
| pfSense Firewall | 192.168.0.1 | 00:f1:f5:34:b3:4a | Server room | Primary gateway |
| CS-SERVER | 192.168.2.254 | 00:22:19:60:50:db | Server room | DC, Hyper-V host (Dell R610) |
| CS-SERVER iDRAC | 192.168.2.65 | 00:22:19:60:50:e3 | Server room | Dell out-of-band management |
| Synology NAS (cascadesds) | 192.168.0.120 | 00:11:32:a7:94:10 | 1st Floor USW Port 40 | synology.cascades.local |
| CS-QB (Hyper-V VM) | 192.168.2.228 | 00:15:5d:02:3b:02 | 1st Floor USW Port 48 | VoIP server |
| Vertical-Remote | 192.168.2.180 | e4:e7:49:52:3a:06 | USW-16-PoE Port 16 | VoIP management |
| NurseAssist | 192.168.3.254 | a8:6d:aa:51:d6:55 | — | Nurse call system? |

## VoIP Phones (AudioCodes)
All on USW-16-PoE, ports 1-8:
| Device | IP Address | Port |
|--------|-----------|------|
| ACL_14325765 | 192.168.3.1 | Port 1 |
| ACL_14827614 | 192.168.2.143 | Port 2 |
| ACL_14865060 | 192.168.3.185 | Port 3 |
| ACL_14761438 | 192.168.2.142 | Port 4 |
| ACL_14761360 | 192.168.2.29 | Port 5 |
| ACL_14761310 | 192.168.3.192 | Port 6 |
| ACL_14761385 | 192.168.3.174 | Port 7 |
| ACL_14761495 | 192.168.3.102 | Port 8 |